[20200401] - Core - Incorrect access control in com_users access level editing function

Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Joomla Front-edit Address Book Component (com_addressbook) Blind SQL Injection

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author...

Joomla! Component Address Book - Blind SQL Injection

Joomla! Component Address Book - Blind SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...

Woltab Burning Board SQL Injection usergroups.php

Hi, A new SQL Injection in the wbb2.x CODE / delete applications groupleader / if $action == 'groupleadersdeleteapplications' $deleteids = array; if isarray$POST'applicationids' while list$applicationid, $val = each$POST'applicationids' if $val == 1 $deleteids = $applicationid; if $deleteids...

Woltlab Burning Board 2.x - usergroups.php SQL Injection

Woltlab Burning Board 2.x - usergroups.php SQL Injection !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings; use...